摘要
随着计算机技术的发展和互联网应用的普及,即时通信软件被广为使用。为了解决目前即时通信软件在使用过程中易受病毒攻击的问题,研究了微软公司的MSN通信协议。在实验中通过对捕获的网络数据包分析和处理,实现了基于网络数据包的即时通信协议信息的还原,即网络数据包的捕获、MSN协议解析、消息还原等主要过程。在真实环境下,利用大量实验数据进行了测试,结果表明,系统能够实现对MSN即时文本消息的解析和还原。为今后对病毒特征码的提取,提供了条件。
With the development of computer technology and the popularization of internet applications,the instant messenger software is widely used.In order to resolve the problem that the instant messenger software is vulnerable to virus attacks when it＇s in use,we have a research on microsoft company＇s MSN protocol.In the experiment,through analysis and processing on the intercepted network packets,we realize the restoration of information of the instant messenger protocol based on network packages,which is the main process of which including intercepting network packets,resolve on the MSN protocol and restoration of information.Under real environment,a large number of experimental data shows that MSN text message can be correctly resolved and restored.It provides the conditions for the extraction of the virus signatures in the future.
出处
《电子测量技术》
2010年第6期130-133,共4页
Electronic Measurement Technology
关键词
网络数据包
即时通信
协议分析
信息还原
UTF-8解码
network packages
instant messenger
protocol analysis
information restoration
UTF-8 decoding
